Re: (RADIATOR) problem with multiple realms in one username
Hello Slava - You don't actually say what your requirements are - could you give me some more details on what exactly you want to do? BTW - if you want a handler to match slave.com as different to slava.com@SLAVA, you should do this: Handler User-Name = /slava.com$/ . /Handler which will match slava.com only at the end of the User-Name string. regards Hugh On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote: Hi Guys, We've got Radiator running on our side. Recently I've found really strange behaviour of Radiator, - the problem comes then username in the incoming RADIUS packet looks like username@realmone@realmtwo (please see the live example from the log file): ... skipped . Mon Jul 8 04:20:39 2002: DEBUG: Packet dump: *** Received from 10.10.10.10 port 51675 Code: Access-Request Identifier: 185 Authentic: 136100so00513008400 Attributes: User-Name = [EMAIL PROTECTED]@SLAVA User-Password = .177238e210203(23518920021226r52419 NAS-Identifier = i-Pass VNAS NAS-IP-Address = 10.10.10.10 NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Mon Jul 8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should be used to handle this request Mon Jul 8 04:20:39 2002: DEBUG: Handling request with Handler 'Realm=slava.com' ... skipped . In the configuration file we have a handler like Handler Realm=slava.com ... /Handler, so we expect that it satisfies all usernames like [EMAIL PROTECTED].. But, as the reality showed, it matches [EMAIL PROTECTED]@SLAVA too.. Most probably that's expected behaviour of Radiator, but how we should change our Handler Handler Realm=.. to work it properly according to our needs? Thank you so much for your help! sincerely yours, Slava Rimdenok Sviatoslav Rimdenok System Administrator COLT Telecom AG Badenerstrasse 820 CH-8048 Zürich t:+41 1 5 600 900 f:+41 1 5 600 910 e:mailto:[EMAIL PROTECTED] www.colt.ch we make business straight.forward === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) problem with multiple realms in one username
Hi Hugh, thank you for your quick response! I'd like to have handler that matches only [EMAIL PROTECTED], and do not match [EMAIL PROTECTED]@SLAVA, [EMAIL PROTECTED]@BLABLABLA nor username@[EMAIL PROTECTED] and so on.. that means : to match the rule it must be only one realm name (for example [EMAIL PROTECTED]@SLAVA has 2 realms inside) and that realm must be slava.com thanks again for your help! see you, Slava -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED]] Sent: Montag, 8. Juli 2002 11:28 To: Rimdenok, Sviatoslav; [EMAIL PROTECTED] Subject: Re: (RADIATOR) problem with multiple realms in one username Hello Slava - You don't actually say what your requirements are - could you give me some more details on what exactly you want to do? BTW - if you want a handler to match slave.com as different to slava.com@SLAVA, you should do this: Handler User-Name = /slava.com$/ . /Handler which will match slava.com only at the end of the User-Name string. regards Hugh On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote: Hi Guys, We've got Radiator running on our side. Recently I've found really strange behaviour of Radiator, - the problem comes then username in the incoming RADIUS packet looks like username@realmone@realmtwo (please see the live example from the log file): ... skipped . Mon Jul 8 04:20:39 2002: DEBUG: Packet dump: *** Received from 10.10.10.10 port 51675 Code: Access-Request Identifier: 185 Authentic: 136100so00513008400 Attributes: User-Name = [EMAIL PROTECTED]@SLAVA User-Password = .177238e210203(23518920021226r52419 NAS-Identifier = i-Pass VNAS NAS-IP-Address = 10.10.10.10 NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Mon Jul 8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should be used to handle this request Mon Jul 8 04:20:39 2002: DEBUG: Handling request with Handler 'Realm=slava.com' ... skipped . In the configuration file we have a handler like Handler Realm=slava.com ... /Handler, so we expect that it satisfies all usernames like [EMAIL PROTECTED].. But, as the reality showed, it matches [EMAIL PROTECTED]@SLAVA too.. Most probably that's expected behaviour of Radiator, but how we should change our Handler Handler Realm=.. to work it properly according to our needs? Thank you so much for your help! sincerely yours, Slava Rimdenok Sviatoslav Rimdenok System Administrator COLT Telecom AG Badenerstrasse 820 CH-8048 Zürich t:+41 1 5 600 900 f:+41 1 5 600 910 e:mailto:[EMAIL PROTECTED] www.colt.ch we make business straight.forward === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) problem with multiple realms in one username
Hello Slava - # Handler for [EMAIL PROTECTED] Handler User-Name = /\@slava.com$/ . /Handler # Handler for [EMAIL PROTECTED]@whatever Handler User-Name = /\@slava.com\@/ . /Handler regards Hugh On Mon, 8 Jul 2002 20:17, [EMAIL PROTECTED] wrote: Hi Hugh, thank you for your quick response! I'd like to have handler that matches only [EMAIL PROTECTED], and do not match [EMAIL PROTECTED]@SLAVA, [EMAIL PROTECTED]@BLABLABLA nor username@[EMAIL PROTECTED] and so on.. that means : to match the rule it must be only one realm name (for example [EMAIL PROTECTED]@SLAVA has 2 realms inside) and that realm must be slava.com thanks again for your help! see you, Slava -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED]] Sent: Montag, 8. Juli 2002 11:28 To: Rimdenok, Sviatoslav; [EMAIL PROTECTED] Subject: Re: (RADIATOR) problem with multiple realms in one username Hello Slava - You don't actually say what your requirements are - could you give me some more details on what exactly you want to do? BTW - if you want a handler to match slave.com as different to slava.com@SLAVA, you should do this: Handler User-Name = /slava.com$/ . /Handler which will match slava.com only at the end of the User-Name string. regards Hugh On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote: Hi Guys, We've got Radiator running on our side. Recently I've found really strange behaviour of Radiator, - the problem comes then username in the incoming RADIUS packet looks like username@realmone@realmtwo (please see the live example from the log file): ... skipped . Mon Jul 8 04:20:39 2002: DEBUG: Packet dump: *** Received from 10.10.10.10 port 51675 Code: Access-Request Identifier: 185 Authentic: 136100so00513008400 Attributes: User-Name = [EMAIL PROTECTED]@SLAVA User-Password = .177238e210203(23518920021226r52419 NAS-Identifier = i-Pass VNAS NAS-IP-Address = 10.10.10.10 NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Mon Jul 8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should be used to handle this request Mon Jul 8 04:20:39 2002: DEBUG: Handling request with Handler 'Realm=slava.com' ... skipped . In the configuration file we have a handler like Handler Realm=slava.com ... /Handler, so we expect that it satisfies all usernames like [EMAIL PROTECTED].. But, as the reality showed, it matches [EMAIL PROTECTED]@SLAVA too.. Most probably that's expected behaviour of Radiator, but how we should change our Handler Handler Realm=.. to work it properly according to our needs? Thank you so much for your help! sincerely yours, Slava Rimdenok Sviatoslav Rimdenok System Administrator COLT Telecom AG Badenerstrasse 820 CH-8048 Zürich t: +41 1 5 600 900 f: +41 1 5 600 910 e:mailto:[EMAIL PROTECTED] www.colt.ch we make business straight.forward === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.